How to find out which program is changing the clipboard?

Question

Malware

Somewhere I picked up a virus that puts my wallets on the clipboard when I open the Webmoney money sending window. Antiviruses, unfortunately, do not catch this muck, I want to catch it on my own, but I just can’t find a way to find out what process is writing to the clipboard. Maybe someone knows a utility with which this can be done?

Answer 1

Answering your own question: Sysmon will help to see who changed the clipboard ( how to set it up ) . Apparently they screwed up somewhere when they released the update. Their technical support just wrote to me that I need to copy the wallet to the clipboard after the money transfer window appears. That's it.

Answer 2

Once the problem can be reproduced - disable one process in the task manager and check.

Answer 3

You can try through delphi it can intercept system interrupts

Answer 4

One thing will help, reinstalling the system

Answer 5

The malware process cannot miraculously start. Check all autostart methods. Of course, not under an infected system, but by booting from a live cd/flash.

Answer 6

process monitor to help
there and find out

Unfortunately, antiviruses do not catch this muck,

And if you scan with
drweb cureit
kaspersky virus removal tool
malwarebytes antimalware
zemana antimalware
in any order
it will also not find anything?